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Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims : 

1 . (currently amended) A method fe^of communicating to a server machine a 
certificate of a user which is sent by a client machine via a security module of a computer 
system, wherein a first protocol used between the client machine and the server machine 
is an HTTP or an equivalent a stateless protocol, and a second security protocol such as 
SSL or an equivalent protocol is implemented used b etween the client machine and the 
security module is a secure stateless protocol , said method comprising: 

inserting said certificate into a cookie header of a request in the first protocol^,]] 

and 

transmitting the request, including said cookie header containing said certificate, 
from the security module to the server machine; 

wherein said certificate has a plurality of separators; and 
wherein said cookie header includes a plurality of cookies , 

2. (previously presented) A method according to claim 1, further comprising: 
removing from said certificate all separators used in headers of the request prior to 

insertion of said certificate into said cookie header. 

3. (currently amended) A method according to claim 1, wherem said inserting 
step further comprising eomprises : 
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determining, prior to the inserting step, whether an existing cookie header is 
present in the request sent by the client machine;[[,]] and 

creating a new cookie header if said existing cookie header is not present in the 
request sent by the client machine. 

4. (currently amended) A method according to claim 3, further comprising: 
adding a specific cookie into the existing or new cookie header;[[,]] and 
assigning a configurable default name to said specific cookie to enable the server 

machine to distinguish the certificate from cookies of the request. 

5. (cancelled). 

6. (currently amended) A security machine for socuring which secures exchanges 
between a client machine and a server machine of a computer system, wherein a first 
protocol used between the client machine and server machine is an HTTP or an 
equivalent a stateless protocol, and a second security protocol such as SSL or an 
e quivalent protocol is implemented between the client machine and said security machine 
is a secure stateless protocol , said security machine comprising: 

an analyzer for enabling which enables the transmission of a certificate inserted 
into a cookie header of an HTTP or equivalent request; 

wherein said cookie header includes a plurality of cookies . 

7. (currently amended) A system comprising: * 
a client machine;[[,]] 
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a server machine;[[J] and 
a security module;[[,]] 

wherein a first protocol used between the client machine and the server machine is 
nn HTTP or an cquivalent are configured to communicate using a first protocol, said first 
protocol comprising a stateless protocol: 

wherein a second security protocol such as SSL or an equivalent protocol is 
implemented between the client machine and the security module are configured to 
communicate using a second protocol, said second protocol comprising a secure stateless 
protocol; rr,11 and 

wherein the security module comprises an analyzing program for enabling which 
enables transmission of a certificate sent by the client machine iftie-in a cookie header of 
an HTTP or equivalent^ request in said stateless protocol, wherein said cookie header 
includes a plurality of cookies . 

8. (currently amended) A computer readable medium upon which is embodied a 
sequence of programmable instructions which, when executed by a security module of a 
computer system, cause the security module to perform operations comprising: 

communicating to a server machine a certificate of a user which is sent by a client 
machine via the security module, wherein a first protocol used between the client machine 
and the server machine is a stateless protocol and wherein a second protocol used 
between the client machine and the security module is a secure stateless protocol; 

inserting said certificate into a cookie header of a request in the fi rst protocol; and 

transmitting the request, including said cookie heade^containing said cer tificate, 
from the security module to the server machine; 
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wherein said certificate has a plurality of separators; and 
wherein said cookie header includes a plurality of cookies. 

A program int e grated into a security module that allows the method according to 
claim 1 to be e x e cut e d when the program is run in a machine. 
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